update ports/claude

Author: lesomnus

ports/claude/Dockerfile

@@ -1,10 +1,13 @@
+# syntax=docker/dockerfile:1
+# Code generated from Dockerfile.tmpl by scripts/gen-dockerfiles; DO NOT EDIT.
+
 # syntax=docker/dockerfile:1
 
 # Claude Code ships as a single binary, so this port has an `http` source rather
 # than a parent image: it has no base image (no FROM ${BASE}), so the base is
 # chosen here. clade injects the selected version as the BASE_TAG build-arg, and
 # a rebuild is triggered whenever the stable release advances (its primary
-# {{.Major}}.{{.Minor}}.{{.Patch}} tag goes missing in the destination repo).
+# <no value>.<no value>.<no value> tag goes missing in the destination repo).
 FROM docker.io/library/debian:bookworm-slim
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
@@ -39,3 +42,25 @@ RUN set -eu; \
 	printf '%s  %s\n' "${checksum}" "${out}" | sha256sum -c -; \
 	chmod +x "${out}"; \
 	claude --version
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+	--mount=type=cache,target=/var/lib/apt,sharing=locked \
+	rm -f /etc/apt/apt.conf.d/docker-clean \
+	&& export DEBIAN_FRONTEND=noninteractive \
+	&& apt-get update \
+	&& apt-get install -y --no-install-recommends \
+		python3 \
+		python3-pip \
+	&& echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen \
+	&& locale-gen
+
+ARG USERNAME=hypnos
+ARG USER_UID=1000
+ARG USER_GID=1000
+RUN groupadd "${USERNAME}" --gid ${USER_GID} \
+	&& useradd --create-home "${USERNAME}" --shell /usr/bin/zsh --uid "${USER_UID}" --gid "${USER_GID}" \
+	&& echo "${USERNAME}:${USERNAME}" | chpasswd \
+	&& echo "${USERNAME} ALL=(ALL) NOPASSWD:ALL" > "/etc/sudoers.d/${USERNAME}"
+
+USER ${USERNAME}
+WORKDIR /home/${USERNAME}

ports/claude/Dockerfile.tmpl

@@ -0,0 +1,54 @@
+# syntax=docker/dockerfile:1
+
+# Claude Code ships as a single binary, so this port has an `http` source rather
+# than a parent image: it has no base image (no FROM ${BASE}), so the base is
+# chosen here. clade injects the selected version as the BASE_TAG build-arg, and
+# a rebuild is triggered whenever the stable release advances (its primary
+# {{.Major}}.{{.Minor}}.{{.Patch}} tag goes missing in the destination repo).
+FROM docker.io/library/debian:bookworm-slim
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+	--mount=type=cache,target=/var/lib/apt,sharing=locked \
+	rm -f /etc/apt/apt.conf.d/docker-clean \
+	&& export DEBIAN_FRONTEND=noninteractive \
+	&& apt-get update \
+	&& apt-get install -y --no-install-recommends \
+		ca-certificates \
+		curl \
+		git \
+		jq
+
+# Install Claude Code from the official release channel. clade injects the
+# resolved stable version as BASE_TAG; for that version we read the manifest to
+# get the per-platform checksum, download the binary, and verify it before use.
+# The base image is glibc (debian), so the platform is linux-<arch> (no -musl).
+ARG BASE_TAG
+RUN set -eu; \
+	case "$(uname -m)" in \
+		x86_64 | amd64) arch="x64" ;; \
+		arm64 | aarch64) arch="arm64" ;; \
+		*) echo "Unsupported architecture: $(uname -m)" >&2; exit 1 ;; \
+	esac; \
+	platform="linux-${arch}"; \
+	base_url="https://downloads.claude.ai/claude-code-releases"; \
+	manifest="$(curl -fsSL "${base_url}/${BASE_TAG}/manifest.json")"; \
+	checksum="$(printf '%s' "${manifest}" | jq -r ".platforms[\"${platform}\"].checksum // empty")"; \
+	[ -n "${checksum}" ] || { echo "Platform ${platform} not found in manifest" >&2; exit 1; }; \
+	out=/usr/local/bin/claude; \
+	curl -fsSL -o "${out}" "${base_url}/${BASE_TAG}/${platform}/claude"; \
+	printf '%s  %s\n' "${checksum}" "${out}" | sha256sum -c -; \
+	chmod +x "${out}"; \
+	claude --version
+
+RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
+	--mount=type=cache,target=/var/lib/apt,sharing=locked \
+	rm -f /etc/apt/apt.conf.d/docker-clean \
+	&& export DEBIAN_FRONTEND=noninteractive \
+	&& apt-get update \
+	&& apt-get install -y --no-install-recommends \
+		python3 \
+		python3-pip \
+	&& echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen \
+	&& locale-gen
+
+{{ template "user.dockerfile" . }}